Professional Documents
Culture Documents
The Spanning Tree Protocol (STP) eliminates Layer 2 loops in networks, by selectively blocking some ports and
allowing other ports to forward traffic, based on global (bridge) and local (port) parameters you can configure.
This chapter describes how to configure Spanning Tree Protocol (STP) parameters on HP ProCurve Routing
Switches.
This chapter also describes advanced Layer 2 features that enable you to overcome limitations in the standard
802.1d Spanning Tree Protocol (STP). These are the advanced features:
• Fast Port Span
• Fast Uplink Span
• Single-instance STP
• SuperSpan
• STP per VLAN group
• Per VLAN Spanning Tree (PVST) and PVST+ Compatibility
Configuration procedures are provided for the standard STP bridge and port parameters as well as advanced STP
parameters.
• To configure standard STP parameters, see “Configuring Standard STP Parameters”.
• To configure advanced parameters, see “Configuring Advanced STP Features” on page 8-19.
8-1
Installation and Basic Configuration Guide
Table 8.2 lists the default STP bridge parameters. The bridge parameters affect the entire spanning tree. If you
are using MSTP, the parameters affect the VLAN. If you are using SSTP, the parameters affect all VLANs that are
members of the single spanning tree.
Forward Delay The period of time a bridge will wait (the listen and learn 15 seconds
period) before beginning to forward data packets.
Possible values: 4 – 30
seconds
Maximum Age The interval a bridge will wait for a hello packet from the 20 seconds
root bridge before initiating a topology change.
Possible values: 6 – 40
seconds
Hello Time The interval of time between each configuration BPDU 2 seconds
sent by the root bridge.
Possible values: 1 – 10
seconds
NOTE: If you plan to change STP bridge timers, HP recommends that you stay within the following ranges, from
section 8.10.2 of the IEEE STP specification.
8-2
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Table 8.3 lists the default STP port parameters. The port parameters affect individual ports and are separately
configurable on each port.
Priority The preference that STP gives this port relative to other 128
ports for forwarding traffic out of the spanning tree.
Possible values: 8 – 252
A higher numerical value means a lower priority; thus,
(configurable in increments
the highest priority is 8.
of 4)
Path Cost The cost of using the port to reach the root bridge. When 10 Mbps – 100
selecting among multiple links to the root bridge, STP
100 Mbps – 19
chooses the link with the lowest path cost and blocks the
other paths. Each port type has its own default STP path Gigabit – 4
cost.
10 Gigabit – 2
Possible values are 0 –
65535
NOTE: When you configure a VLAN, the VLAN inherits the global STP settings. However, once you begin to
define a VLAN, you can no longer configure standard STP parameters globally using the CLI. From that point on,
you can configure STP only within individual VLANs.
This command enables a separate spanning tree in each VLAN, including the default VLAN.
Syntax: [no] spanning-tree
USING THE WEB MANAGEMENT INTERFACE
1. Log on to the device using a valid user name and password for read-write access. The System configuration
panel is displayed.
2. Select Enable next to Spanning Tree.
8-3
Installation and Basic Configuration Guide
NOTE: For information about the Single and Fast checkboxes, see “Single Spanning Tree (SSTP)” on
page 8-62 and “Fast Uplink Span” on page 8-21.
HP9300(config-vlan-10)# spanning-tree
NOTE: If you change the STP state of the primary port in a trunk group, the change affects all ports in the trunk
group.
HP9300(config-if-1/1)# spanning-tree
NOTE: If you plan to change STP bridge timers, HP recommends that you stay within the following ranges, from
section 8.10.2 of the IEEE STP specification.
8-4
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
The command in this example changes the priority on a device on which you have not configured port-based
VLANs. The change applies to the default VLAN. If you have configured a port-based VLAN on the device, you
can configure the parameters only at the configuration level for individual VLANs. Enter commands such as the
following:
HP9300(config)# vlan 20
To make this change in the default VLAN, enter the following commands:
HP9300(config)# vlan 1
Syntax: [no] spanning-tree [forward-delay <value>] | [hello-time <value>] | [maximum-age <value>] | [priority
<value>]
The forward-delay <value> parameter specifies the forward delay and can be a value from 4 – 30 seconds. The
default is 15 seconds.
NOTE: You can configure an HP device for faster convergence (including a shorter forward delay) using Fast
Span or Fast Uplink Span. See “Configuring Advanced STP Features” on page 8-19.
The hello-time <value> parameter specifies the hello time and can be a value from 1 – 10 seconds. The default
is 2 seconds.
NOTE: This parameter applies only when this device or VLAN is the root bridge for its spanning tree.
The maximum-age <value> parameter specifies the amount of time the device waits for receipt of a hello packet
before initiating a topology change. You can specify from 6 – 40 seconds. The default is 20 seconds.
The priority <value> parameter specifies the priority and can be a value from 0 – 65535. A higher numerical
value means a lower priority. Thus, the highest priority is 0. The default is 32768.
You can specify some or all of these parameters on the same command line. If you specify more than one
parameter, you must specify them in the order shown above, from left to right.
USING THE WEB MANAGEMENT INTERFACE
To modify the STP parameters:
1. Log on to the device using a valid user name and password for read-write access. The System configuration
panel is displayed.
2. Click on the plus sign next to Configure in the tree view to display the configuration options.
3. Select the STP link to display the STP bridge and port parameters.
8-5
Installation and Basic Configuration Guide
4. Click the Modify button in the STP bridge parameters table to display the STP configuration panel, as shown
in the following example. If the device has multiple port-based VLANs, select the Modify button next to the
VLAN on which you want to change the parameters. A dialog such as the following is displayed.
Syntax: spanning-tree ethernet <portnum> path-cost <value> | priority <value> | disable | enable
The path-cost <value> parameter specifies the port’s cost as a path to the spanning tree’s root bridge. STP
prefers the path with the lowest cost. You can specify a value from 0 – 65535.
• 10 Mbps – 100
• 100 Mbps – 19
• Gigabit – 4
• 10 Gigabit – 2
The priority <value> parameter specifies the preference that STP gives this port relative to other ports for
forwarding traffic out of the spanning tree. You can specify a value from 8 – 252, in increments of 4. If you enter a
8-6
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
value that is not divisible by four the software rounds to the nearest value that is. The default is 128. A higher
numerical value means a lower priority; thus, the highest priority is 8.
NOTE: The range in software releases earlier than 07.5.04 is 0 – 255. If you are upgrading a device that has a
configuration saved under an earlier software release, and the configuration contains a value from 0 – 7 for a
port’s STP priority, the software changes the priority to the default when you save the configuration while running
the new release.
The disable | enable parameter disables or re-enables STP on the port. The STP state change affects only this
VLAN. The port’s STP state in other VLANs is not changed.
USING THE WEB MANAGEMENT INTERFACE
To modify the STP port parameters:
1. Log on to the device using a valid user name and password for read-write access. The System configuration
panel is displayed.
2. Click on the plus sign next to Configure in the tree view to display the configuration options.
3. Select the STP link to display the STP bridge and port parameters.
4. Click the Modify button in the STP port parameters table to display the STP configuration panel, as shown in
the following example. If the device has multiple port-based VLANs, select the Modify button next to the
VLAN on which you want to change the parameters. A dialog such as the following is displayed.
5. Select the port (and slot if applicable) from the Port and Slot pulldown lists.
6. Enter the desired changes to the priority and path cost fields.
7. Click Apply STP Port to apply the changes to only the selected port or select Apply To All Ports to apply the
changes to all the ports.
NOTE: If you want to save the priority and path costs of one port to all other ports on the device or within the
selected VLAN, you can click the Apply To All Ports button.
8. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change
to the startup-config file on the device’s flash memory.
8-7
Installation and Basic Configuration Guide
VLAN Root Root Root Prio Max He- Ho- Fwd Last Chg Bridge
Hex
1 80 19 FORWARDING 1 0
800000e0804d4a00 800000e0804d4a00
2 80 0 DISABLED 0 0
0000000000000000 0000000000000000
3 80 0 DISABLED 0 0
0000000000000000 0000000000000000
4 80 0 DISABLED 0 0
0000000000000000 0000000000000000
5 80 19 FORWARDING 1 0
800000e0804d4a00 800000e0804d4a00
6 80 19 BLOCKING 0 0
800000e0804d4a00 800000e0804d4a00
7 80 0 DISABLED 0 0
0000000000000000 0000000000000000
8-8
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
The detail parameter and its additional optional parameters display detailed information for individual ports. See
“Displaying Detailed STP Information for Each Interface” on page 8-14.
The show span command shows the following information.
VLAN ID The port-based VLAN that contains this spanning tree (instance of
STP). VLAN 1 is the default VLAN. If you have not configured port-
based VLANs on this device, all STP information is for VLAN 1.
Root ID The ID assigned by STP to the root bridge for this spanning tree.
Root Cost The cumulative cost from this bridge to the root bridge. If this device
is the root bridge, then the root cost is 0.
Root Port The port on this device that connects to the root bridge. If this device
is the root bridge, then the value is “Root” instead of a port number.
Priority Hex This device or VLAN’s STP priority. The value is shown in
hexadecimal format.
Note: If you configure this value, specify it in decimal format. See
“Changing STP Bridge Parameters” on page 8-4.
Max age sec The number of seconds this device or VLAN waits for a hello message
from the root bridge before deciding the root has become unavailable
and performing a reconvergence.
Hello sec The interval between each configuration BPDU sent by the root
bridge.
Hold sec The minimum number of seconds that must elapse between
transmissions of consecutive Configuration BPDUs on a port.
Fwd dly sec The number of seconds this device or VLAN waits following a
topology change and consequent reconvergence.
Last Chang sec The number of seconds since the last time a topology change
occurred.
Chg cnt The number of times the topology has changed since this device was
reloaded.
8-9
Installation and Basic Configuration Guide
State The port’s STP state. The state can be one of the following:
• BLOCKING – STP has blocked Layer 2 traffic on this port to
prevent a loop. The device or VLAN can reach the root bridge
using another port, whose state is FORWARDING. When a port
is in this state, the port does not transmit or receive user frames,
but the port does continue to receive STP BPDUs.
• DISABLED – The port is not participating in STP. This can occur
when the port is disconnected or STP is disabled on the port.
• FORWARDING – STP is allowing the port to send and receive
frames.
• LISTENING – STP is responding to a topology change and this
port is listening for a BPDU from neighboring bridge(s) in order to
determine the new topology. No user frames are transmitted or
received during this state.
• LEARNING – The port has passed through the LISTENING state
and will change to the BLOCKING or FORWARDING state,
depending on the results of STP’s reconvergence. The port does
not transmit or receive user frames during this state. However,
the device can learn the MAC addresses of frames that the port
receives during this state and make corresponding entries in the
MAC table.
Fwd Trans The number of times STP has changed the state of this port between
BLOCKING and FORWARDING.
Design Cost The cost to the root bridge as advertised by the designated bridge that
is connected to this port. If the designated bridge is the root bridge
itself, then the cost is 0. The identity of the designated bridge is
shown in the Design Bridge field.
Design Root The root bridge as recognized on this port. The value is the same as
the root bridge ID listed in the Root ID field.
Design Bridge The designated bridge to which this port is connected. The
designated bridge is the device that connects the network segment on
the port to the root bridge.
8 - 10
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
VLAN ID The port-based VLAN that contains this spanning tree (instance of
STP). VLAN 1 is the default VLAN. If you have not configured port-
based VLANs on this device, all STP information is for VLAN 1.
Root ID The ID assigned by STP to the root bridge for this spanning tree.
Root Cost The cumulative cost from this bridge to the root bridge. If this device
is the root bridge, then the root cost is 0.
Root Port The port on this device that connects to the root bridge. If this device
is the root bridge, then the value is “Root” instead of a port number.
Max Age The number of seconds this device or VLAN waits for a hello message
from the root bridge before deciding the root has become unavailable
and performing a reconvergence.
Hello Time The interval between each configuration BPDU sent by the root
bridge.
Hold Time The minimum number of seconds that must elapse between
transmissions of consecutive Configuration BPDUs on a port.
Forward Delay The number of seconds this device or VLAN waits following a
topology change and consequent reconvergence.
Topology Last Change The number of seconds since the last time a topology change
occurred.
Topology Change Counter The number of times the topology has changed since this device was
reloaded.
8 - 11
Installation and Basic Configuration Guide
State The port’s STP state. The state can be one of the following:
• BLOCKING – STP has blocked Layer 2 traffic on this port to
prevent a loop. The device or VLAN can reach the root bridge
using another port, whose state is FORWARDING. When a port
is in this state, the port does not transmit or receive user frames,
but the port does continue to receive STP BPDUs.
• DISABLED – The port is not participating in STP. This can occur
when the port is disconnected or STP is disabled on the port.
• FORWARDING – STP is allowing the port to send and receive
frames.
• LISTENING – STP is responding to a topology change and this
port is listening for a BPDU from neighboring bridge(s) in order to
determine the new topology. No user frames are transmitted or
received during this state.
• LEARNING – The port has passed through the LISTENING state
and will change to the BLOCKING or FORWARDING state,
depending on the results of STP’s reconvergence. The port does
not transmit or receive user frames during this state. However,
the device can learn the MAC addresses of frames that the port
receives during this state and make corresponding entries in the
MAC table.
Transition The number of times STP has changed the state of this port between
BLOCKING and FORWARDING.
Cost The cost to the root bridge as advertised by the designated bridge that
is connected to this port. If the designated bridge is the root bridge
itself, then the cost is 0. The identity of the designated bridge is
shown in the Design Bridge field.
Root The root bridge as recognized on this port. The value is the same as
the root bridge ID listed in the Root ID field.
8 - 12
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
If the software has been running less than 15 minutes (the maximum interval for utilization statistics), the
command indicates how long the software has been running. Here is an example:
IP 0.00 0.00
0.00 0.00 0
To display utilization statistics for a specific number of seconds, enter a command such as the following:
ARP 0.00 0
BGP 0.00 0
GVRP 0.00 0
ICMP 0.01 1
IP 0.00 0
OSPF 0.00 0
RIP 0.00 0
STP 0.01 0
VRRP 0.00 0
When you specify how many seconds’ worth of statistics you want to display, the software selects the sample that
most closely matches the number of seconds you specified. In this example, statistics are requested for the
previous two seconds. The closest sample available is actually for the previous 1 second plus 80 milliseconds.
Syntax: show process cpu [<num>]
The <num> parameter specifies the number of seconds and can be from 1 – 900. If you use this parameter, the
command lists the usage statistics only for the specified number of seconds. If you do not use this parameter, the
command lists the usage statistics for the previous one-second, one-minute, five-minute, and fifteen-minute
intervals.
8 - 13
Installation and Basic Configuration Guide
legend: [S=Slot]
8 - 14
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
======================================================================
======================================================================
If a port is disabled, the only information shown by this command is “DISABLED”. If a port is enabled, this display
shows the following information.
Syntax: show span detail [vlan <vlan-id> [ ethernet <portnum> ] | <num>]
The vlan <vlan-id> parameter specifies a VLAN.
The ethernet <portnum> parameter specifies an individual port within the VLAN (if specified).
The <num> parameter specifies the number of VLANs you want the CLI to skip before displaying detailed STP
information. For example, if the device has six VLANs configured (VLAN IDs 1, 2, 3, 99, 128, and 256) and you
enter the command show span detail 4, detailed STP information is displayed for VLANs 128 and 256 only.
NOTE: If the configuration includes VLAN groups, the show span detail command displays the master VLANs
of each group but not the member VLANs within the groups. However, the command does indicate that the VLAN
is a master VLAN. The show span detail vlan <vlan-id> command displays the information for the VLAN even if
it is a member VLAN. To list all the member VLANs within a VLAN group, enter the show vlan-group [<group-
id>] command.
Active Spanning Tree protocol The VLAN that contains the listed ports and the active Spanning Tree
protocol.
The STP type can be one of the following:
• MULTIPLE SPANNNG TREE (MSTP)
• GLOBAL SINGLE SPANNING TREE (SSTP)
Note: If STP is disabled on a VLAN, the command displays the
following message instead: “Spanning-tree of port-vlan <vlan-id> is
disabled.”
8 - 15
Installation and Basic Configuration Guide
Table 8.6: CLI Display of Detailed STP Information for Ports (Continued)
Active global timers The global STP timers that are currently active, and their current
values. The following timers can be listed:
• Hello – The interval between Hello packets. This timer applies
only to the root bridge.
• Topology Change (TC) – The amount of time during which the
topology change flag in Hello packets will be marked, indicating a
topology change. This timer applies only to the root bridge.
• Topology Change Notification (TCN) – The interval between
Topology Change Notification packets sent by a non-root bridge
toward the root bridge. This timer applies only to non-root
bridges.
Port number and STP state The internal port number and the port’s STP state.
The internal port number is one of the following:
• The port’s interface number, if the port is the designated port for
the LAN.
• The interface number of the designated port from the received
BPDU, if the interface is not the designated port for the LAN.
The state can be one of the following:
• BLOCKING – STP has blocked Layer 2 traffic on this port to
prevent a loop. The device or VLAN can reach the root bridge
using another port, whose state is FORWARDING. When a port
is in this state, the port does not transmit or receive user frames,
but the port does continue to receive STP BPDUs.
• DISABLED – The port is not participating in STP. This can occur
when the port is disconnected or STP is administratively disabled
on the port.
• FORWARDING – STP is allowing the port to send and receive
frames.
• LISTENING – STP is responding to a topology change and this
port is listening for a BPDU from neighboring bridge(s) in order to
determine the new topology. No user frames are transmitted or
received during this state.
• LEARNING – The port has passed through the LISTENING state
and will change to the BLOCKING or FORWARDING state,
depending on the results of STP’s reconvergence. The port does
not transmit or receive user frames during this state. However,
the device can learn the MAC addresses of frames that the port
receives during this state and make corresponding entries in the
MAC table.
Note: If the state is DISABLED, no further STP information is
displayed for the port.
Port Priority This port’s STP priority. The value is shown as a hexadecimal
number.
8 - 16
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Table 8.6: CLI Display of Detailed STP Information for Ports (Continued)
Root The ID assigned by STP to the root bridge for this spanning tree.
Designated Bridge The MAC address of the designated bridge to which this port is
connected. The designated bridge is the device that connects the
network segment on the port to the root bridge.
Designated Port The port number sent from the designated bridge.
Designated Path Cost The cost to the root bridge as advertised by the designated bridge that
is connected to this port. If the bridge is the root bridge itself, then the
cost is 0. The identity of the designated bridge is shown in the
Designated Bridge field.
Active Timers The current values for the following timers, if active:
• Message age – The number of seconds this port has been
waiting for a hello message from the root bridge.
• Forward delay – The number of seconds that have passed since
the last topology change and consequent reconvergence.
• Hold time – The number of seconds that have elapsed since
transmission of the last Configuration BPDU.
BPDUs Sent and Received The number of BPDUs sent and received on this port since the
software was reloaded.
8 - 17
Installation and Basic Configuration Guide
Configured speed auto, actual 100Mbit, configured duplex fdx, actual fdx
No port name
529 multicast
Port Link State Dupl Speed Trunk Tag Priori MAC Name
1/1 Down None None None None No level0 00e0.52a9.bb00
1/2 Down None None None None No level0 00e0.52a9.bb01
1/3 Down None None None None No level0 00e0.52a9.bb02
1/4 Down None None None None No level0 00e0.52a9.bb03
1/5 Down None None None None No level0 00e0.52a9.bb04
1/6 Down None None None None No level0 00e0.52a9.bb05
1/7 Down None None None None No level0 00e0.52a9.bb06
1/8 Down None None None None No level0 00e0.52a9.bb07
In this example, only one port, 3/11, is forwarding traffic toward the root bridge.
USING THE WEB MANAGEMENT INTERFACE
To display STP information for a specific port, use the same method as the one described in “Displaying STP
Information for an Entire Device” on page 8-8:
8 - 18
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
1. Log on to the device using a valid user name and password for read-only or read-write access. The System
configuration panel is displayed.
2. Click on the plus sign next to Monitor in the tree view to display the monitoring options.
3. Select the STP link to display the STP bridge and port parameters.
In normal STP, the accelerated cache aging occurs even when a single host goes up or down. Because Fast
Port Span does not send a topology change notification when a host on a Fast Port Span port goes up or
down, the unnecessary cache aging that can occur in these circumstances under normal STP is eliminated.
Fast Port Span is a system-wide parameter and is enabled by default. Thus, when you boot a device with
software release 06.6.05 or later, all the ports that are attached only to end stations run Fast Port Span. For ports
8 - 19
Installation and Basic Configuration Guide
that are not eligible for Fast Port Span, such as ports connected to other networking devices, the device
automatically uses the normal STP settings. If a port matches any of the following criteria, the port is ineligible for
Fast Port Span and uses normal STP instead:
• The port is 802.1q tagged
• The port is a member of a trunk group
• The port has learned more than one active MAC address
• An STP Configuration BPDU has been received on the port, thus indicating the presence of another bridge on
the port.
You also can explicitly exclude individual ports from Fast Port Span if needed. For example, if the only uplink
ports for a wiring closet switch are Gigabit ports, you can exclude the ports from Fast Port Span.
NOTE: The fast port-span command has additional parameters that let you exclude specific ports. These
parameters are shown in the following section.
To exclude a set of ports from Fast Port Span, enter commands such as the following:
HP9300(config)# fast port-span exclude ethernet 1/1 ethernet 2/1 ethernet 3/2
To exclude a contiguous (unbroken) range of ports from Fast Span, enter commands such as the following:
HP9300(config)# fast port-span exclude ethernet 1/1 to 1/24
8 - 20
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Syntax: [no] fast port-span [exclude ethernet <portnum> [ethernet <portnum>… | to <portnum>]]
To re-enable Fast Port Span on a port, enter a command such as the following:
HP9300(config)# no fast port-span exclude ethernet 1/1
This command re-enables Fast Port Span on port 1/1 only and does not re-enable Fast Port Span on other
excluded ports. You also can re-enable Fast Port Span on a list or range of ports using the syntax shown above
this example.
To re-enable Fast Port Span on all excluded ports, disable and then re-enable Fast Port Span by entering the
following commands:
HP9300(config)# no fast port-span
Disabling and then re-enabling Fast Port Span clears the exclude settings and thus enables Fast Port Span on all
eligible ports. To make sure Fast Port Span remains enabled on the ports following a system reset, save the
configuration changes to the startup-config file after you re-enable Fast Port Span. Otherwise, when the system
resets, those ports will again be excluded from Fast Port Span.
USING THE WEB MANAGEMENT INTERFACE
You cannot exclude individual ports from Fast Span using the Web management interface.
NOTE: To avoid the potential for temporary bridging loops, Hewlett-Packard recommends that you use the Fast
Uplink feature only for wiring closet switches (switches at the edge of the network cloud). In addition, enable the
feature only on a group of ports intended for redundancy, so that at any given time only one of the ports is
expected to be in the forwarding state.
8 - 21
Installation and Basic Configuration Guide
• If the working trunk group is partially down but not completely down, no switch-over to the backup occurs.
This behavior is the same as in the standard STP feature.
• If the working trunk group is completely down, a backup trunk group can go through an accelerated transition
only if the following are true:
• The trunk group is included in the fast uplink group.
• All other ports except those in this trunk group are either disabled or blocked. The accelerated transition
applies to all ports in this trunk group.
• When the original working trunk group comes back (partially or fully), the transition back to the original
topology is accelerated if the conditions listed above are met.
Configuring a Fast Uplink Port Group
To enable Fast Uplink, use one of the following methods.
USING THE CLI
To configure a group of ports for Fast Uplink Span, enter the following commands:
HP9300(config)# fast uplink-span ethernet 4/1 to 4/4
If you delete a port that is the primary port of a trunk group, all ports in the trunk group are removed from the Fast
Uplink Span group.
USING THE WEB MANAGEMENT INTERFACE
You cannot configure the Fast Uplink Span feature using the Web management interface.
8 - 22
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
NOTE: This rapid convergence will not occur on ports connected to shared media devices, such as hubs. To take
advantage of the rapid convergence provided by 802.1W, make sure to explicitly configure all point-to-point links in
a topology.
The convergence provided by the standard 802.1W protocol occurs more rapidly than the convergence provided
by previous spanning tree protocols because:
• Classic or legacy 802.1D STP protocol requires a newly selected Root port to go through listening and
learning stages before traffic convergence can be achieved. The 802.1D traffic convergence time is
calculated using the following formula:
2 x FORWARD_DELAY + BRIDGE_MAX_AGE.
If default values are used in the parameter configuration, convergence can take up to 50 seconds. (In this
document STP will be referred to as 802.1D.)
• RSTP Draft 3 works only on bridges that have Alternate ports, which are the precalculated “next best root
port”. (Alternate ports provide back up paths to the root bridge.) Although convergence occurs from 0 – 500
milliseconds in RSTP Draft 3, the spanning tree topology reverts to the 802.1D convergence if an Alternate
port is not found.
• Convergence in 802.1w bridge is not based on any timer values. Rather, it is based on the explicit
handshakes between Designated ports and their connected Root ports to achieve convergence in less than
500 milliseconds.
8 - 23
Installation and Basic Configuration Guide
NOTE: All examples in this document assume that all ports in the illustrated topologies are point-to-point links
and are homogeneous (they have the same path cost value) unless otherwise specified.
The topology in Figure 8.1 contains four bridges. Routing Switch 1 is the root bridge since it has the lowest bridge
priority. Routing Switch 2 through Routing Switch 4 are non-root bridges.
Port7 Port8
8 - 24
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
8 - 25
Installation and Basic Configuration Guide
Port2 Port3
Routing Switch 3
Bridge priority = 2000
Port5
Edge Port
However, if any incoming RST BPDU is received from a previously configured Edge port, 802.1W automatically
makes the port as a non-edge port. This is extremely important to ensure a loop free Layer 2 operation since a
non-edge port is part of the active RSTP topology.
The 802.1W protocol can auto-detect an Edge port and a non-edge port. An administrator can also configure a
port to be an Edge port using the CLI. It is recommended that Edge ports are configured explicitly to take
advantage of the Edge port feature, instead of allowing the protocol to auto-detect them.
Point-to-Point Ports
To take advantage of the 802.1W features, ports on an 802.1W topology should be explicitly configured as point-
to-point links using the CLI. Shared media should not be configured as point-to-point links.
NOTE: Configuring shared media or non-point-to-point links as point-to-point links could lead to Layer 2 loops.
The topology in Figure 8.3 is an example of shared media that should not be configured as point-to-point links. In
Figure 8.3, a port on a bridge communicates or is connected to at least two ports.
8 - 26
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
8 - 27
Installation and Basic Configuration Guide
maximum number of BPDUs per hello interval are sent every second. Based on what mode it is operating in,
it sends out either legacy BPDUs or RST BPDUs. In this document legacy BPDUs are also referred to as STP
BPDUs.
• Port Protocol Migration – This state machine deals with compatibility with 802.1D bridges. When a legacy
BPDU is detected on a port, this state machine configures the port to transmit and receive legacy BPDUs and
operate in the legacy mode.
• Topology Change – This state machine detects, generates, and propagates topology change notifications. It
acknowledges Topology Change Notice (TCN) messages when operating in 802.1D mode. It also flushes the
MAC table when a topology change event takes place.
• Port State Transition – This state machine transitions the port to a discarding, learning, or forwarding state
and performs any necessary processing associated with the state changes.
• Port Timers – This state machine is responsible for triggering any of the state machines described above,
based on expiration of specific port timers.
In contrast to the 802.1D standard, the 802.1W standard does not have any bridge specific timers. All timers in the
CLI are applied on a per-port basis, even though they are configured under bridge parameters.
802.1W state machines attempt to quickly place the ports into either a forwarding or discarding state. Root ports
are quickly placed in forwarding state when both of the following events occur:
• It is assigned to be the Root port.
• It receives an RST BPDU with a proposal flag from a Designated port. The proposal flag is sent by ports with
a Designated role when they are ready to move into a forwarding state.
When a the role of Root port is given to another port, the old Root port is instructed to reroot. The old Root port
goes into a discarding state and negotiates with its peer port for a new role and a new state. A peer port is the port
on the other bridge to which the port is connected. For example, in Figure 8.4, Port1 of Routing Switch 200 is the
peer port of Port2 of Routing Switch 100.
A port with a Designated role is quickly placed into a forwarding state if one of the following occurs:
• The Designated port receives an RST BPDU that contains an agreement flag from a Root port
• The Designated port is an Edge port
However, a Designated port that is attached to an Alternate port or a Backup port must wait until the forward delay
timer expires twice on that port while it is still in a Designated role, before it can proceed to the forwarding state.
Backup ports are quickly placed into discarding states.
Alternate ports are quickly placed into discarding states.
A port operating in 802.1W mode may enter a learning state to allow MAC entries to be added to the filtering
database; however, this state is transient and lasts only a few milliseconds, if the port is operating in 802.1W mode
and if the port meets the conditions for rapid transition.
Handshake Mechanisms
To rapidly transition a Designated or Root port into a forwarding state, the Port Role Transition state machine uses
handshake mechanisms to ensure loop free operations. It uses one type of handshake if no Root port has been
assigned on a bridge, and another type if a Root port has already been assigned.
Handshake When No Root Port is Elected
If a Root port has not been assigned on a bridge, 802.1W uses the Proposing -> Proposed -> Sync -> Synced ->
Agreed handshake:
• Proposing – The Designated port on the root bridge sends an RST BPDU packet to its peer port that contains
a proposal flag. The proposal flag is a signal that indicates that the Designated port is ready to put itself in a
forwarding state (Figure 8.4). The Designated port continues to send this flag in its RST BPDU until it is
placed in a forwarding state (Figure 8.7) or is forced to operate in 802.1D mode. (See “Compatibility of
802.1W with 802.1D” on page 48.)
• Proposed – When a port receives an RST BPDU with a proposal flag from the Designated port on its point-to-
8 - 28
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
point link, it asserts the Proposed signal and one of the following occurs (Figure 8.4):
• If the RST BPDU that the port receives is superior to what it can transmit, the port assumes the role of a
Root port. (See the section on “Bridges and Bridge Port Roles” on page 8-23.)
• If the RST BPDU that the port receives is inferior to what it can transmit, then the port is given the role of
Designated port.
NOTE: Proposed will never be asserted if the port is connected on a shared media link.
Port2
Designated port
Proposing
RST BPDU
sent with a
Proposal
flag
Port1
Root port
Proposed
Port2 Port3
Port2 Port3
8 - 29
Installation and Basic Configuration Guide
• Sync – Once the Root port is elected, it sets a sync signal on all the ports on the bridge. The signal tells the
ports to synchronize their roles and states (Figure 8.5). Ports that are non-edge ports with a role of
Designated port change into a discarding state. These ports have to negotiate with their peer ports to
establish their new roles and states.
Port1
Designated port
Port1
Root port
Sync
Port2 Port3
Sync Sync
Discarding Discarding
Port2 Port3
Indicates a signal
8 - 30
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
• Synced – Once the Designated port changes into a discarding state, it asserts a synced signal. Immediately,
Alternate ports and Backup ports are synced. The Root port monitors the synced signals from all the bridge
ports. Once all bridge ports asserts a synced signal, the Root port asserts its own synced signal (Figure 8.6).
Port1
Designated port
Port1
Root port
Synced
Port2 Port3
Synced Synced
Discarding Discarding
Port2 Port3
Indicates a signal
8 - 31
Installation and Basic Configuration Guide
• Agreed – The Root port sends back an RST BPDU containing an agreed flag to its peer Designated port and
moves into the forwarding state. When the peer Designated port receives the RST BPDU, it rapidly
transitions into a forwarding state.
Port1
Designated port
Forwarding
RST BPDU
sent with Port1
an Agreed Root port
flag Synced
Forwarding
Port2 Port3
Synced Synced
Discarding Discarding
Port2 Port3
Indicates a signal
At this point, the handshake mechanism is complete between Routing Switch 100, the root bridge, and Routing
Switch 200.
Routing Switch 200 updates the information on the Routing Switch 200’s Designated ports (Port2 and Port3) and
identifies the new root bridge. The Designated ports send RST BPDUs, containing proposal flags, to their
downstream bridges, without waiting for the hello timers to expire on them. This process starts the handshake
with the downstream bridges.
For example, Port2/Routing Switch 200 sends an RST BPDU to Port2/Routing Switch 300 that contains a
proposal flag. Port2/Routing Switch 300 asserts a proposed signal. Ports in Routing Switch 300 then set sync
signals on the ports to synchronize and negotiate their roles and states. Then the ports assert a synced signal and
when the Root port in Routing Switch 300 asserts it’s synced signal, it sends an RST BPDU to Routing Switch 200
with an agreed flag.
This handshake is repeated between Routing Switch 200 and Routing Switch 400 until all Designated and Root
ports are in forwarding states.
8 - 32
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Switch 100
Port2
Designated
port
Port2 Switch 60
Port1 Port4
Designated port Designated port
Port1
Root port
Port4
Switch 200
Port2 Port3
Port2 Port3
Switch 300
Switch 400
8 - 33
Installation and Basic Configuration Guide
The handshake that occurs between Routing Switch 60 and Routing Switch 100 follows the one described in the
previous section (“Handshake When No Root Port is Elected” on page 8-28). The former root bridge becomes a
non-root bridge and establishes a Root port (Figure 8.9).
However, since Routing Switch 200 already had a Root port in a forwarding state, 802.1W uses the Proposing ->
Proposed -> Sync and Reroot -> Sync and Rerooted -> Rerooted and Synced -> Agreed handshake:
• Proposing and Proposed – The Designated port on the new root bridge (Port4/Routing Switch 60) sends an
RST BPDU that contains a proposing signal to Port4/Routing Switch 200 to inform the port that it is ready to
put itself in a forwarding state (Figure 8.9). 802.1W algorithm determines that the RST BPDU that Port4/
Routing Switch 200 received is superior to what it can generate, so Port4/Routing Switch 200 assumes a
Root port role.
Proposing
Port2 Port3
8 - 34
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
• Sync and Reroot – The Root port then asserts a sync and a reroot signal on all the ports on the bridge. The
signal tells the ports that a new Root port has been assigned and they are to renegotiate their new roles and
states. The other ports on the bridge assert their sync and reroot signals. Information about the old Root port
is discarded from all ports. Designated ports change into discarding states (Figure 8.10).
Proposing
Port1
Root port
Sync
Reroot
Forwarding
Port4
Routing Switch 200 Root port
Sync
Reroot
Port2 Port3 Discarding
Sync Sync
Reroot Reroot
Discarding Discarding
Port2 Port3
Indicates a signal
8 - 35
Installation and Basic Configuration Guide
• Sync and Rerooted – When the ports on Routing Switch 200 have completed the reroot phase, they assert
their rerooted signals and continue to assert their sync signals as they continue in their discarding states.
They also continue to negotiate their roles and states with their peer ports (Figure 8.11).
Proposing
Port1
Designated port
Sync
Rerooted
Discarding
Port4
Routing Switch 200 Root port
Sync
Rerooted
Port2 Port3 Discarding
Sync Sync
Rerooted Rerooted
Discarding Discarding
Port2 Port3
8 - 36
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
• Synced and Agree – When all the ports on the bridge assert their synced signals, the new Root port asserts
its own synced signal and sends an RST BPDU to Port4/Routing Switch 60 that contains an agreed flag
(Figure 8.11). The Root port also moves into a forwarding state.
Proposing
Port1
Rerooted
RST BPDU
Synced
sent with
Discarding
an Agreed
flag
Port4
Routing Switch 200 Root port
Rerooted
Synced
Port2 Forwarding
Port3
Rerooted Rerooted
Synced Synced
Discarding Discarding
Port2 Port3
Indicates a signal
The old Root port on Routing Switch 200 becomes an Alternate Port (Figure 8.13). Other ports on that bridge are
elected to appropriate roles.
The Designated port on Routing Switch 60 goes into a forwarding state once it receives the RST BPDU with the
agreed flag.
8 - 37
Installation and Basic Configuration Guide
Proposing
Port1
Alternate port
Port4
Routing Switch 200 Root port
Port2 Port3
Proposing Proposing
Port2 Port3
Recall that Routing Switch 200 sent the agreed flag to Port4/Routing Switch 60 and not to Port1/Routing Switch
100 (the port that connects Routing Switch 100 to Routing Switch 200). Therefore, Port1/Routing Switch 100 does
not go into forwarding state instantly. It waits until two instances of the forward delay timer expires on the port
before it goes into forwarding state.
At this point the handshake between the Routing Switch 60 and Routing Switch 200 is complete.
The remaining bridges (Routing Switch 300 and Routing Switch 400) may have to go through the reroot
handshake if a new Root port needs to be assigned.
8 - 38
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
NOTE: The remaining examples assume that the appropriate handshake mechanisms occur as port roles and
states change.
Convergence at Start Up
In Figure 8.14, two bridges Routing Switch 2 and Routing Switch 3 are powered up. There are point-to-point
connections between Port3/Routing Switch 2 and Port3/Routing Switch 3.
Routing Switch 2
Port3
Designated
port
Port3
Root port
Routing Switch 3
Bridge priority = 2000
At power up, all ports on Routing Switch 2 and Routing Switch 3 assume Designated port roles and are at
discarding states before they receive any RST BPDU.
Port3/Routing Switch 2, with a Designated role, transmits an RST BPDU with a proposal flag to Port3/Routing
Switch 3. A ports with a Designated role sends the proposal flag in its RST BPDU when they are ready to move to
a forwarding state.
Port3/Routing Switch 3, which starts with a role of Designated port, receives the RST BPDU and finds that it is
superior to what it can transmit; therefore, Port3/Routing Switch 3 assumes a new port role, that of a Root port.
Port3/Routing Switch 3 transmits an RST BPDU with an agreed flag back to Routing Switch 2 and immediately
goes into a forwarding state.
Port3/Routing Switch 2 receives the RST BPDU from Port3/Routing Switch 3 and immediately goes into a
forwarding state.
Now 802.1W has fully converged between the two bridges, with Port3/Routing Switch 3 as an operational root port
in forwarding state and Port3/Routing Switch 2 as an operational Designated port in forwarding state.
8 - 39
Installation and Basic Configuration Guide
Port3
Routing Port5
Designated
Routing Switch 2 Switch 1 Backup port
port
Port2 Port2
Bridge priority = 1500 Root port Designated Bridge priority = 1000
port
Port3 Port4
Designated Designated port
port
Port3
Alternate
port
Port4
Bridge priority = 2000 Root port
Routing Switch 3
8 - 40
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Now, Port3/Routing Switch 3 is currently in a discarding state and is negotiating a port role. It received RST
BPDUs from Port3/Routing Switch 2. The 802.1W algorithm determines that the RST BPDUs Port3/Routing
Switch 3 received are superior to those it can transmit; however, they are not superior to those that are currently
being received by the current Root port (Port4). Therefore, Port3 retains the role of Alternate port.
Ports 3/Routing Switch 1 and Port5/Routing Switch 1 are physically connected. Port5/Routing Switch 1 received
RST BPDUs that are superior to those received on Port3/Routing Switch 1; therefore, Port5/Routing Switch 1 is
given the Backup port role while Port3 is given the Designated port role. Port3/Routing Switch 1, does not go
directly into a forwarding state. It waits until the forward delay time expires twice on that port before it can proceed
to the forwarding state.
Once convergence is achieved, the active Layer 2 forwarding path converges as shown in Figure 8.16.
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
8 - 41
Installation and Basic Configuration Guide
Routing
Routing Switch 2 Port3 Switch 1 Port5
Port2
Bridge priority = 1500 Port2 Bridge priority = 1000
Port3 Port4
Port3 Port4
Routing Switch 3
8 - 42
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
previous Root port, enters a discarding state and negotiates with other ports on the bridge to establish its new role
and state, until it finally assumes the role of a Designated port.
Next, the following happens:
• Port3/Routing Switch 2, the Designated port, sends an RST BPDU, with a proposal flag to Port3/Routing
Switch 3.
• Port2/Routing Switch 2 also sends an RST BPDU with an agreed flag to Port2/Routing Switch 1 and then
places itself into a forwarding state.
When Port2/Routing Switch 1 receives the RST BPDU with an agreed flag sent by Port2/Routing Switch 2, it puts
that port into a forwarding state. The topology is now fully converged.
When Port3/Routing Switch 3 receives the RST BPDU that Port3/Routing Switch 2 sent, 802.1W algorithm
determines that these RST BPDUs are superior to those that Port3/Routing Switch 3 can transmit. Therefore,
Port3/Routing Switch 3 is given a new role, that of an Alternate port. Port3/Routing Switch 3 immediately enters a
discarding state.
Now Port3/Routing Switch 2 does not go into a forwarding state instantly like the Root port. It waits until the
forward delay timer expires twice on that port while it is still in a Designated role, before it can proceed to the
forwarding state. The wait, however, does not cause a denial of service, since the essential connectivity in the
topology has already been established.
When fully restored, the topology is the same as that shown on Figure 8.15.
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
In Figure 8.18, Routing Switch 5 is selected as the root bridge since it is the bridge with the highest priority. Lines
in the figure show the point-to-point connection to the bridges in the topology.
8 - 43
Installation and Basic Configuration Guide
Routing Switch 5 sends an RST BPDU that contains a proposal flag to Port5/Routing Switch 2. When handshakes
are completed in Routing Switch 5, Port5/Routing Switch 2 is selected as the Root port on Routing Switch 2. All
other ports on Routing Switch 2 are given Designated port role with discarding states.
Port5/Routing Switch 2 then sends an RST BPDU with an agreed flag to Routing Switch 5 to confirm that it is the
new Root port and the port enters a forwarding state. Port7 and Port8 are informed of the identity of the new Root
port. 802.1W algorithm selects Port7 as the Designated port while Port8 becomes the Backup port.
Port3/Routing Switch 5 sends an RST BPDU to Port3/Routing Switch 6 with a proposal flag. When Port3/Routing
Switch 5 receives the RST BPDU, handshake mechanisms select Port3 as the Root port of Routing Switch 6. All
other ports are given a Designated port role with discarding states. Port3/Routing Switch 6 then sends an RST
BPDU with an agreed flag to Port3/Routing Switch 5 to confirm that it is the Root port. The Root port then goes
into a forwarding state.
Now, Port4/Routing Switch 6 receives RST BPDUs that are superior to what it can transmit; therefore, it is given
the Alternate port role. The port remains in discarding state.
Port5/Routing Switch 6 receives RST BPDUs that are inferior to what it can transmit. The port is then given a
Designated port role.
Next Routing Switch 2 sends RST BPDUs with a proposal flag to Port3/Routing Switch 4. Port3 becomes the Root
port for the bridge; all other ports are given a Designated port role with discarding states. Port3/Routing Switch 4
sends an RST BPDU with an agreed flag to Routing Switch 2 to confirm that it is the new Root port. The port then
goes into a forwarding state.
Now Port4/Routing Switch 4 receives an RST BPDU that is superior to what it can transmit. The port is then given
an Alternate port role, and remains in discarding state.
Likewise, Port5/Switch 4 receives an RST BPDU that is superior to what it can transmit. The port is also given an
Alternate port role, and remains in discarding state.
Port2/Routing Switch 2 transmits an RST BPDU with a proposal flag to Port2/Routing Switch 1. Port2/Routing
Switch 1 becomes the Root port. All other ports on Routing Switch 1 are given Designated port roles with
discarding states.
Port2/Routing Switch 1 sends an RST BPDU with an agreed flag to Port2/Routing Switch 2 and Port2/Routing
Switch 1 goes into a forwarding state.
Port3/Routing Switch 1 receives an RST BPDUs that is inferior to what it can transmit; therefore, the port retains
its Designated port role and goes into forwarding state only after the forward delay timer expires twice on that port
while it is still in a Designated role.
Port3/Routing Switch 2 sends an RST BPDU to Port3/Routing Switch 3 that contains a proposal flag. Port3/
Routing Switch 3 becomes the Root port, while all other ports on Routing Switch 3 are given Designated port roles
and go into discarding states. Port3/Routing Switch 3 sends an RST BPDU with an agreed flag to Port3/Routing
Switch 2 and Port3/Routing Switch 3 goes into a forwarding state.
Now, Port2/Routing Switch 3 receives an RST BPDUs that is superior to what it can transmit so that port is given
an Alternate port state.
Port4/Routing Switch 3 receives an RST BPDU that is inferior to what it can transmit; therefore, the port retains its
Designated port role.
Ports on all the bridges in the topology with Designated port roles that received RST BPDUs with agreed flags go
into forwarding states instantly. However, Designated ports that did not receive RST BPDUs with agreed flags
must wait until the forward delay timer expires twice on those port. Only then will these port move into forwarding
states.
The entire 802.1W topology converges in less than 300 msec and the essential connectivity is established
between the designated ports and their connected root ports.
8 - 44
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
After convergence is complete, Figure 8.19 shows the active Layer 2 path of the topology in Figure 8.18.
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
NOTE: Edge ports, Alternate ports, or Backup ports do not need to propagate a topology change.
The TCN is sent in the RST BPDU that a port sends. Ports on other bridges in the topology then acknowledge the
topology change once they receive the RST BPDU, and send the TCN to other bridges until all the bridges are
informed of the topology change.
8 - 45
Installation and Basic Configuration Guide
For example, Port3/Routing Switch 2 in Figure 8.20, fails. Port4/Routing Switch 3 becomes the new Root port.
Port4/Routing Switch 3 sends an RST BPDU with a TCN to Port4/Routing Switch 4. To propagate the topology
change, Port4/Routing Switch 4 then starts a TCN timer on itself, on the bridge’s Root port, and on other ports on
that bridge with a Designated role. Then Port3/Routing Switch 4 sends RST BPDU with the TCN to Port4/Routing
Switch 2. (Note the new active Layer 2 path in Figure 8.20.)
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
Port3
Port3 Port4 Port3
8 - 46
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Routing Switch 2 then starts the TCN timer on the Designated ports and sends RST BPDUs that contain the TCN
as follows (Figure 8.21):
• Port5/Routing Switch 2 sends the TCN to Port2/Routing Switch 5
• Port4/Routing Switch 2 sends the TCN to Port4/Routing Switch 6
• Port2/Routing Switch 2 sends the TCN to Port2/Routing Switch 1
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
Port3
Port3 Port4 Port3
8 - 47
Installation and Basic Configuration Guide
Then FRY1, Routing Switch 5, and Routing Switch 6 send RST BPDUs that contain the TCN to Routing Switch 3
and Routing Switch 4 to complete the TCN propagation (Figure 8.22).
Routing Switch 2
Bridge priority = 200
Port5 Port2
Port2 Port2
Port3
Port3 Port4 Port3
8 - 48
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
For example, in Figure 8.23, Routing Switch 10 and Routing Switch 30 receive legacy BPDUs from Routing
Switch 20. Ports on Routing Switch 10 and Routing Switch 30 begin sending BPDUs in STP format to allow them
to operate transparently with Routing Switch 20.
Once Routing Switch 20 is removed from the LAN, Routing Switch 10 and Routing Switch 30 receive and transmit
BPDUs in the STP format to and from each other. This state will continue until the administrator enables the force-
migration-check command to force the bridge to send RSTP BPDU during a migrate time period. If ports on the
bridges continue to hear only STP BPDUs after this migrate time period, those ports will return to sending STP
BPDUs. However, when the ports receive RST BPDUs during the migrate time period, the ports begin sending
RST BPDUs. The migrate time period is non-configurable. It has a value of three seconds.
NOTE: The IEEE standards state that 802.1W bridges need to interoperate with 802.1D bridges. IEEE
standards set the path cost of 802.1W bridges to be between 1 and 200,000,000; whereas path cost of 802.1D
bridges are set between 1 and 65,535. In order for the two bridge types to be able to interoperate in the same
topology, the administrator needs to configure the bridge path cost appropriately. Path costs for either 802.1W
bridges or 802.1D bridges need to be changed; in most cases, path costs for 802.1W bridges need to be changed.
8 - 49
Installation and Basic Configuration Guide
NOTE: If you change the 802.1W state of the primary port in a trunk group, the change affects all ports in that
trunk group.
HP9300(config-if-1/1)# no spanning-tree
The command in this example changes the priority on a device on which you have not configured port-based
VLANs. The change applies to the default VLAN. If you have configured a port-based VLAN on the device, you
can configure the parameters only at the configuration level for individual VLANs. Enter commands such as the
following:
HP9300(config)# vlan 20
To make this change in the default VLAN, enter the following commands:
HP9300(config)# vlan 1
Syntax: spanning-tree 802-1w [forward-delay <value>] | [hello-time <value>] | [max-age <time>] | [force-version
<value>] | [priority <value>]
The forward-delay <value> parameter specifies how long a port waits before it forwards an RST BPDU after a
topology change. This can be a value from 4 – 30 seconds. The default is 15 seconds.
8 - 50
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
The hello-time <value> parameter specifies the interval between two hello packets. This parameter can have a
value from 1 – 10 seconds. The default is 2 seconds; however, set this value to at least 4 seconds to provide
enough time for BPDUs to reach the root bridge before the timeout period expires on a non-root bridge port.
The max-age <value> parameter specifies the amount of time the device waits to receive a hello packet before it
initiates a topology change. You can specify a value from 6 – 40 seconds. The default is 20 seconds.
Beginning with software release 07.6.04, the value of max-age must be greater than the value of forward-delay
to ensure that the downstream bridges do not age out faster than the upstream bridges (those bridges that are
closer to the root bridge).
The force-version <value> parameter forces the bridge to send BPDUs in a specific format. You can specify one
of the following values:
• 0 – The STP compatibility mode. Only STP (or legacy) BPDUs will be sent.
• 2 – The default. RST BPDUs will be sent unless a legacy bridge is detected. If a legacy bridge is detected,
STP BPDUs will be sent instead.
The default is 2.
The priority <value> parameter specifies the priority of the bridge. You can enter a value from 0 – 65535. A
lower numerical value means a the bridge has a higher priority. Thus, the highest priority is 0. The default is
32768.
You can specify some or all of these parameters on the same command line. If you specify more than one
parameter, you must specify them in the order shown above, from left to right.
USING THE WEB MANAGEMENT INTERFACE
You cannot modify 802.1W bridge parameters using the Web management interface.
Syntax: spanning-tree 802-1w ethernet <portnum> path-cost <value> | priority <value> | [admin-edge-port] |
[admin-pt2pt-mac] | [force-migration-check]
The ethernet <portnum> parameter specifies the interface used.
The path-cost <value> parameter specifies the cost of the port’s path to the root bridge. 802.1W prefers the path
with the lowest cost. You can specify a value from 1 – 20,000,000. Table 1 shows the recommended path cost
values from the IEEE standards.
8 - 51
Installation and Basic Configuration Guide
The priority <value> parameter specifies the preference that 802.1W gives to this port relative to other ports for
forwarding traffic out of the topology. You can specify a value from 8 – 252, in increments of 4. If you enter a value
that is not divisible by four the software rounds to the nearest value that is. The default is 128. A higher numerical
value means a lower priority; thus, the highest priority is 8
Set the admin-edge-port to enabled or disabled. If set to enabled, then the port becomes an edge port in the
domain.
Set the admin-pt2pt-mac to enabled or disabled. If set to enabled, then a port is connected to another port
through a point-to-point link. The point-to-point link increases the speed of convergence. This parameter,
however, does not auto-detect whether or not the link is a physical point-to-point link.
The force-migration-check parameter forces the specified port to sent one RST BPDU. If only STP BPDUs are
received in response to the sent RST BPDU, then the port will go return to sending STP BPDUs.
USING THE WEB MANAGEMENT INTERFACE
You cannot modify 802.1W port parameters using the Web management interface.
EXAMPLE:
Suppose you want to enable 802.1W on a system with no active port-based VLANs and change the hello-time
from the default value of 2 to 8 seconds. Additionally, suppose you want to change the path and priority costs for
port 5 only. To do so, enter the following commands.
HP9300(config)# spanning-tree 802-1w hello-time 8
8 - 52
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
HP9300(config)#show 802-1w
VLAN 1 BPDU cam_index is 2 and the IGC and DMA master Are(HEX) 0 1 2 3
800000e080541700 20 2 15 Default 3
VLAN ID The port-based VLAN that owns the STP instance. VLAN 1 is the
default VLAN. If you have not configured port-based VLANs on this
device, all 802.1W information is for VLAN 1.
Bridge Max Age The configured max age for this bridge. The default is 20.
Bridge Hello The configured hello time for this bridge.The default is 2.
Bridge FwdDly The configured forward delay time for this bridge. The default is 15.
8 - 53
Installation and Basic Configuration Guide
Force-Version The configured force version value. One of the following value is
displayed:
• 0 – The bridge has been forced to operate in an STP compatibility
mode.
• 2 – The bridge has been forced to operate in an 802.1W mode.
(This is the default.)
txHoldCnt The number of BPDUs that can be transmitted per Hello Interval. The
default is 3.
Root Bridge Identifier ID of the Root bridge that is associated with this bridge
Root Path Cost The cost to reach the root bridge from this bridge. If the bridge is the
root bridge, then this parameter shows a value of zero.
Designated Bridge Identifier The bridge from where the root information was received.It can be
from the root bridge itself, but it could also be from another bridge.
Root Port The port on which the root information was received. This is the port
that is connected to the Designated Bridge.
Max Age The max age is derived from the Root port. An 802.1W-enabled
bridge uses this value, along with the hello and message age
parameters to compute the effective age of an RST BPDU.
The message age parameter is generated by the Designated port
and transmitted in the RST BPDU. RST BPDUs transmitted by a
Designated port of the root bridge contains a message value of zero.
Effective age is the amount of time the Root port, Alternate port, or
Backup port retains the information it received from its peer
Designated port. Effective age is reset every time a port receives an
RST BPDU from its Designated port. If a Root port does not receive
an RST BPDU from its peer Designated port for a duration more than
the effective age, the Root port ages out the existing information and
recomputes the topology.
If the port is operating in 802.1D compatible mode, then max age
functionality is the same as in 802.1D (STP).
Fwd Dly The number of seconds a non-edge Designated port waits until it can
apply any of the following transitions, if the RST BPDU it receives
does not have an agreed flag:
• Discarding state to learning state
• Learning state to forwarding state
When a non-edge port receives the RST BPDU it goes into forwarding
state within 4 seconds or after two hello timers expire on the port.
Fwd Dly is also the number of seconds that a Root port waits for an
RST BPDU with a proposal flag before it applies the state transitions
listed above.
If the port is operating in 802.1D compatible mode, then forward delay
functionality is the same as in 802.1D (STP).
8 - 54
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Hello The hello value derived from the Root port. It is the number of
seconds between two Hello packets.
Pri The configured priority of the port. The default is 128 or 0x80.
Port Path Cost The configured path cost on a link connected to this port.
State The port’s current 802.1W state. A port can have one of the following
states:
• Forwarding
• Discarding
• Learning
• Disabled
Refer to “Bridge Port States” on page 8-27 and “Edge Port and Non-
Edge Port States” on page 8-27.
Designated Cost The best root path cost that this port received, including the best root
path cost that it can transmit.
Designated Bridge The ID of the bridge that sent the best RST BPDU that was received
on this port.
8 - 55
Installation and Basic Configuration Guide
======================================================================
======================================================================
ActiveTimers - helloWhen 0
VLAN ID ID of the VLAN that owns the instance of 802.1W and whether or not it
is active.
txHoldCount The number of BPDUs that can be transmitted per Hello Interval. The
default is 3.
8 - 56
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
State The port’s current 802.1W state. A port can have one of the following
states:
• Forwarding
• Discarding
• Learning
• Disabled
Refer to “Bridge Port States” on page 8-27 and “Edge Port and Non-
Edge Port States” on page 8-27.
Path Cost The configured path cost on a link connected to this port.
Priority The configured priority of the port. The default is 128 or 0x80.
AdminOperEdge Indicates if the port is an operational Edge port. Edge ports may either
be auto-detected or configured (forced) to be Edge ports using the
CLI:
• T – The port is and Edge port.
• F – The port is not an Edge port. This is the default.
8 - 57
Installation and Basic Configuration Guide
ActiveTimers Shows what timers are currently active on this port and the number of
seconds they have before they expire:
• rrWhile – Recent root timer. A non-zero value means that the port
has recently been a Root port.
• rcvdInfoWhile – Received information timer. Shows the time
remaining before the information held by this port expires (ages
out). This timer is initialized with the effective age parameter.
(See “Max Age” on page 8-54.)
• rbWhile – Recent backup timer. A non-zero value means that the
port has recently been a Backup port.
• helloWhen – Hello period timer. The value shown is the amount
of time between hello messages.
• tcWhile – Topology change timer. The value shown is the interval
when topology change notices can be propagated on this port.
• fdWhile – Forward delay timer. (See the explanation for Fwd Dly
on page 54.)
• mdelayWhile – Migration delay timer. The amount of time that a
bridge on the same LAN has to synchronize its migration state
with this port before another BPDU type can cause this port to
change the BPDU that it transmits.
Machine States The current states of the various state machines on the port:
• PIM – State of the Port Information state machine.
• PRT – State of the Port Role Transition state machine.
• PST – State of the Port State Transition state machine.
• TCM – State of the Topology Change state machine.
• PPM – State of the Port Protocol Migration.
• PTX – State of the Port Transmit state machine.
state machines.
Received Shows the number of BPDU types the port has received:
• RST BPDU – BPDU in 802.1W format.
• Config BPDU – Legacy configuration BPDU (802.1D format).
• TCN BPDU – Legacy topology change BPDU (802.1D format).
802.1W Draft 3
As an alternative to full 802.1W, you can configure 802.1W Draft 3. 8021.W Draft 3 provides a subset of the RSTP
capabilities described in the 802.1W STP specification.
8021.W Draft 3 support is disabled by default. When the feature is enabled, if a root port on an HP device that is
not the root bridge becomes unavailable, the device can automatically Routing Switch over to an alternate root
port, without reconvergence delays. 8021.W Draft 3 does not apply to the root bridge, since all the root bridge’s
ports are always in the forwarding state.
Figure 8.24 shows an example of an optimal STP topology. In this topology, all the non-root bridges have at least
two paths to the root bridge (Routing Switch 1 in this example). One of the paths is through the root port. The
8 - 58
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
other path is a backup and is through the alternate port. While the root port is in the forwarding state, the alternate
port is in the blocking state.
Root Bridge
Bridge priority = 2 Bridge priority = 4
Root port = 2/2
Port 1/4 Port 2/4
Alternate = 2/3, 2/4
FWD FWD
If the root port on a Routing Switch becomes unavailable, 8021.W Draft 3 immediately fails over to the alternate
port, as shown in Figure 8.25.
8 - 59
Installation and Basic Configuration Guide
Root Bridge
Bridge priority = 2 Bridge priority = 4
Port 1/4 Port 2/4 Root port = 2/2
FWD FWD Alternate = 2/3, 2/4
In this example, port 3/3 on Routing Switch 3 has become unavailable. In standard STP (802.1D), if the root port
becomes unavailable, the Routing Switch must go through the listening and learning stages on the alternate port
to reconverge with the spanning tree. Thus, port 3/4 must go through the listening and learning states before
entering the forwarding state and thus reconverging with the spanning tree.
8021.W Draft 3 avoids the reconvergence delay by calculating an alternate root port, and immediately failing over
to the alternate port if the root port becomes unavailable. The alternate port is in the blocking state as long as the
root port is in the forwarding state, but moves immediately to the active state if the root port becomes unavailable.
Thus, using 8021.W Draft 3, Routing Switch 3 immediately fails over to port 3/4, without the delays caused by the
listening and learning states.
8021.W Draft 3 selects the port with the next-best cost to the root bridge. For example, on Routing Switch 3, port
3/3 has the best cost to the root bridge and thus is selected by STP as the root port. Port 3/4 has the next-best
cost to the root bridge, and thus is selected by 8021.W Draft 3 as the alternate path to the root bridge.
Once a failover occurs, the Routing Switch no longer has an alternate root port. If the port that was an alternate
port but became the root port fails, standard STP is used to reconverge with the network. You can minimize the
reconvergence delay in this case by setting the forwarding delay on the root bridge to a lower value. For example,
if the forwarding delay is set to 15 seconds (the default), change the forwarding delay to a value from 3 – 10
seconds.
During failover, 8021.W Draft 3 flushes the MAC addresses leaned on the unavailable root port, selects the
alternate port as the new root port, and places that port in the forwarding state. If traffic is flowing in both
directions on the new root port, addresses are flushed (moved) in the rest of the spanning tree automatically.
8 - 60
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Reconvergence Time
Spanning tree reconvergence using 8021.W Draft 3 can occur within one second.
After the spanning tree reconverges following the topology change, traffic also must reconverge on all the bridges
attached to the spanning tree. This is true regardless of whether 8021.W Draft 3 or standard STP is used to
reconverge the spanning tree.
Traffic reconvergence happens after the spanning tree reconvergence, and is achieved by flushing the Layer 2
information on the bridges.
• Following 8021.W Draft 3 reconvergence of the spanning tree, traffic reconvergence occurs in the time it
takes for the bridge to detect the link changes plus the STP maximum age set on the bridge.
• If standard STP reconvergence occurs instead, traffic reconvergence takes two times the forward delay plus
the maximum age.
NOTE: 8021.W Draft 3 does not apply when a failed root port comes back up. In this case, standard STP is
used.
Configuration Considerations
8021.W Draft 3 is disabled by default. To ensure optimal performance of the feature before you enable it:
• Configure the bridge priorities so that the root bridge is one that supports 8021.W Draft 3. (Use an HP device
or third-party device that supports 8021.W Draft 3.)
• Change the forwarding delay on the root bridge to a value lower than the default 15 seconds. HP
recommends a value from 3 – 10 seconds. The lower forwarding delay helps reduce reconvergence delays
in cases where 8021.W Draft 3 is not applicable, such as when a failed root port comes back up.
• Configure the bridge priorities and root port costs so that each device has an active path to the root bridge if
its root port becomes unavailable. For example, port 3/4 is connected to port 2/4 on Routing Switch 2, which
has the second most favorable bridge priority in the spanning tree.
NOTE: If reconvergence involves changing the state of a root port on a bridge that supports 802.1D STP but not
8021.W Draft 3, then reconvergence still requires the amount of time it takes for the ports on the 802.1D bridge to
change state to forwarding (as needed), and receive BPDUs from the root bridge for the new topology.
NOTE: STP must be enabled before you can enable 8021.W Draft 3.
8 - 61
Installation and Basic Configuration Guide
NOTE: This command does not also enable STP. To enable STP, first enter the spanning-tree command
without the rstp parameter. After you enable STP, enter the spanning-tree rstp command to enable 8021.W
Draft 3.
NOTE: This command does not also enable single STP. To enable single STP, first enter the spanning-tree
single command without the rstp parameter. After you enable single STP, enter the spanning-tree single rstp
command to enable 8021.W Draft 3.
To disable 8021.W Draft 3 on a device that is running single STP, enter the following command:
HP9300(config)# no spanning-tree single rstp
NOTE: When SSTP is enabled, the BPDUs on tagged ports go out untagged.
If you disable SSTP, all VLANs that were members of the single spanning tree run MSTP instead. In MSTP, each
VLAN has its own spanning tree. VLANs that were not members of the single spanning tree were not enabled for
STP. Therefore, STP remains disabled on those VLANs.
Enabling SSTP
To enable SSTP, use one of the following methods.
8 - 62
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
NOTE: If the device has only one port-based VLAN (the default VLAN), then the device is already running a
single instance of STP. In this case, you do not need to enable SSTP. You need to enable SSTP only if the device
contains more than one port-based VLAN and you want all the ports to be in the same STP broadcast domain.
NOTE: If the device has only one port-based VLAN, the CLI command for enabling SSTP is not listed in the CLI.
The command is listed only if you have configured a port-based VLAN.
To change a global STP parameter, enter a command such as the following at the global CONFIG level:
HP9300(config) spanning-tree single priority 2
To change an STP parameter for a specific port, enter commands such as the following:
The commands shown above override the global setting for STP priority and set the priority to 10 for port 1/1.
Syntax: [no] spanning-tree single [ethernet <portnum> path-cost <value> | priority <value>]
NOTE: Both commands listed above are entered at the global CONFIG level.
8 - 63
Installation and Basic Configuration Guide
then the command output has three STP entries. To display information for VLANs 10 and 2024 only, enter show
span 1.
The detail parameter and its additional optional parameters display detailed information for individual ports. See
“Displaying Detailed STP Information for Each Interface” on page 8-14.
USING THE WEB MANAGEMENT INTERFACE
1. Log on to the device using a valid user name and password for read-write access. The System configuration
dialog is displayed.
2. Click on the Single checkbox next to Spanning Tree to place a checkmark in the box, as shown in the
following example.
SuperSpan
SuperSpan is an HP STP enhancement that allows Service Providers (SPs) to use STP in both SP networks and
customer networks. The SP devices are HP devices and are configured to tunnel each customers' STP BPDUs
through the SP. From the customer's perspective, the SP network is a loop-free non-blocking device or network.
The SP network behaves like a hub in the sense that the necessary blocking occurs in the customer network, not
in the SP.
The HP interfaces that connect the SP to a customer's network are configured as SuperSpan boundary interfaces.
Each SuperSpan boundary interface is configured with a customer ID, to uniquely identify the customer's network
within SuperSpan.
8 - 64
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Figure 8.26 shows an example SuperSpan implementation. In this example, an SP's network is connected to
multiple customers. Each customer network is running its own instance of standard STP. The HP devices in the
SP are running SuperSpan.
SuperSpan
root bridge
BLK
SP 2
Cust 2 Port 1/2 Port 2/2
In this example, the SP network contains two devices that are running SuperSpan. The SP is connected to two
customer networks. Each customer network is running its own instance of STP. SuperSpan prevents Layer 2
loops in the traffic flow with each customer while at the same time isolating each customer’s traffic and spanning
tree from the traffic and spanning trees of other customers. For example, the SP devices provide loop prevention
for Customer 1 while ensuring that Customer 1’s traffic is never forwarded to Customer 2. In this example,
customer 1 has two interfaces to the SP network, ports 1/1 and 1/2 connected to SP 1. The SP network behaves
like a non-blocking hub. BPDUs are tunneled through the network. To prevent a Layer 2 loop, customer 1’s port
1/2 enters the blocking state.
Customer ID
SuperSpan uses a SuperSpan customer ID to uniquely identify and forward traffic for each customer. You assign
the customer ID as part of the SuperSpan configuration of the HP devices in the SP. In Figure 8.26, the spanning
trees of customer 1 and customer 2 do not interfere with one another because the SP network isolates each
customer’s spanning tree based on the SuperSpan customer IDs in the traffic.
BPDU Forwarding
When an HP device receives a customer's BPDU on a boundary interface, the device changes the destination
MAC address of the BPDU from the bridge group address (01-80-c2-00-00-00) as follows:
• The first byte (locally administered bit) is changed from 01 to 03, to indicate that the BPDU needs to be
tunneled.
• The fourth and fifth bytes are changed to the customer STP ID specified on the boundary interface.
For example, if the customer's STP ID is 1, the destination MAC address of the customer's BPDUs is changed to
the following: 03-80-c2-00-01-00.
Each HP device that is configured for SuperSpan forwards the BPDU using the changed destination MAC
address. At the other end of the tunnel, the HP device connected to the customer's network changes the
destination MAC address back to the bridge group address (01-80-c2-00-00-00).
8 - 65
Installation and Basic Configuration Guide
Preforwarding State
To ensure that the customer's network has time to converge at Layer 2 and prevent loops, the HP devices
configured for SuperSpan use a special forwarding state, Preforwarding. The Preforwarding state occurs
between the Learning and Forwarding states and by default lasts for five seconds. During the Preforwarding
state, the HP device forwards tunneled BPDUs from customers only and does not forward data traffic. This
ensures that the customer’s network will detect the Layer 2 loop and block a port. The SP network remains
unblocked. After the Preforwarding state, the HP ports change to the Forwarding state and forward data traffic as
well as BPDUs.
The default length of the Preforwarding state is five seconds. You can change the length of the Preforwarding
state to a value from 3 – 30 seconds.
Figure 8.27 shows an example of how the Preforwarding state is used.
SuperSpan
root bridge
SP 1
FWD
FWD
Cust 1
FWD
BLK
In this example, a customer has two links to the SP. Since the SP is running SuperSpan, the SP ports enter the
Preforwarding state briefly to allow the customer ports connected to the SP to detect the Layer 2 loop and block
one of the ports.
NOTE: If you add a new device to a network that is already running SuperSpan, you must enable SuperSpan on
the new device, at least on the VLANs that will be tunneling the customer traffic. Otherwise, the new device does
not use the Preforwarding state. This can cause the wrong ports to be blocked.
8 - 66
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
NOTE: All the combinations listed above are supported when the boundary ports joining the SP SuperSpan
domain to the client spanning trees are untagged. For example, all these combinations are valid in super
aggregated VLAN configurations. If the boundary ports are tagged, you cannot use Single STP in the client
network in combination with multiple spanning trees in the SP SuperSpan domain.
2/2
R 10 R
100
1/1 2/1
Customer Provider
Region Region
3/1 2/1
R 20 R
200 2/2
Both the customer and SP regions are running multiple spanning trees (one per port-based VLAN) in the Layer 2
switched network. The customer network contains VLANs 10 and 20 while the SP network contains VLANs 100
and 200. Customer traffic from VLAN 10 and VLAN 20 is aggregated by VLAN 100 in the SP since the boundary
ports, 2/1 on R100 and R200, are untagged members of VLAN 100. By adjusting the bridge priority on VLANs 10
and 20, the customer can select a different root bridge for each spanning tree running in the customer network.
In the above example, STP in VLAN 10 will select R10 as the root bridge and make 1/1 on R10 forwarding while
blocking port 3/1 on R20. The opposite occurs for STP in VLAN 20. As a result, both links connecting the
customer and SP regions are fully utilized and serve as backup links at the same time, providing loop-free, non-
blocking connectivity. In the SP network, multiple STP instances are running (one for VLAN 100 and one for
VLAN 200) to ensure loop-free, non-blocking connectivity in each VLAN.
SuperSPAN boundaries are configured at port 2/1 of R100 and R200. Since the customer’s traffic will be
aggregated into VLAN 100 at the SP, the SP network appears to the customer to be a loop-free non-blocking hub
to the customer network when port 2/2 on R200 is blocked by STP in VLAN 100.
Customer Uses Multiple Spanning Trees But SP Uses Single STP
Figure 8.29 shows an example of SuperSpan where the customer network uses multiple spanning trees while the
SP network uses Single STP.
8 - 67
Installation and Basic Configuration Guide
Figure 8.29 Customer using multiple spanning trees and SP using Single STP
R 2/2
R 10 single
1/1 span
2/1
Customer Provider
Region Region
3/1 2/1
R 20 2/2
Customer traffic from different VLANs is maintained by different spanning trees, while the SP network is
maintained by a single spanning tree. The SP can still use multiple VLANs at the core to separate traffic from
different customers. However, all VLANs will have the same network topology because they are all calculated by
the single spanning tree. The loop-free, non-blocking network acts like a hub for the customer network, with
boundary ports 2/1 on each device being untagged members of VLAN 100.
Traffic from all VLANs in the customer network will be aggregated through VLAN 100 at the SP. This setup leaves
the customer network’s switching pattern virtually unchanged from the scenario in “Customer and SP Use Multiple
Spanning Trees” on page 8-67, since the SP network still is perceived as a virtual hub, and maintenance of the
hub's loop-free topology is transparent to the customer network.
Customer Uses Single STP But SP Uses Multiple Spanning Trees
Figure 8.30 shows an example of SuperSpan where the customer network uses Single STP while the SP uses
multiple spanning trees.
8 - 68
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Figure 8.30 Customer using Single STP and SP using multiple spanning trees
R
single R 2/2
span 1/1 2/1 100
customer Provider
Region Region
3/1 2/1
R 2/2
200
In this setup, the customer network is running a single spanning tree for VLANs 10 and 20. The traffic from VLAN
10 and 20 will be carried, or aggregated by VLAN 100 at the SP’s network. The main difference between this
scenario and the previous tow scenarios is that all traffic at the customer’s network now follows the same path,
having the same STP root bridge in all VLANs. Therefore, the customer network will not have the ability to
maximize network utilization on all its links. On the other hand, loop-free, non-blocking topology is still separately
maintained by the customer network’s single spanning tree and the SP’s per-VLAN spanning tree on VLAN 100.
Customer and SP Use Single STP
Figure 8.31 shows an example of SuperSpan where the customer network and SP both use Single STP.
R R 2/2
single single
span 1/1 2/1 span
customer Provider
Region Region
3/1 2/1
2/2
In this setup, both the customer and SP networks are running a single spanning tree at Layer 2. The traffic from
VLAN 10 and 20 will be carried, or aggregated by VLAN 100 at the SP network as in the previous scenario. Loop-
free, non-blocking topology is still separately maintained by the customer's single spanning tree and the SP's
single spanning tree.
8 - 69
Installation and Basic Configuration Guide
Configuring SuperSpan
To configure an HP device for SuperSpan:
• Configure each interface on the HP device that is connected to customer equipment as a boundary interface.
This step enables the interface to convert the destination MAC address in the customer's BPDUs.
The software requires you to specify a SuperSpan customer ID when configuring the boundary interface.
Use an ID from 1 – 65535. The customer ID uniquely identifies the customer. Use the same customer ID for
each SP interface with the same customer. When tunneling BPDUs through the HP network, the devices use
the customer ID to ensure that BPDUs are forwarded only to the customer's devices, and not to other
customers' devices.
• Globally enable SuperSpan. This step enables the Preforwarding state.
Configuring a Boundary Interface
To configure the boundary interfaces on SP 1 in Figure 8.26 on page 8-65, enter the following commands:
HP9300(config)# interface 1/1
HP9300(config-if-e1000-1/1)# stp-boundary 1
HP9300(config-if-e1000-1/2)# stp-boundary 2
These commands configure two interfaces on the HP device as SuperSpan boundary interfaces. Interface
1/1 is a boundary interface with customer 1. Interface 1/2 is a boundary interface with customer 2. Each
boundary interface is associated with a number, which is the SuperSpan ID. The SuperSpan ID identifies the
instance of SuperSpan you are associating with the interface. Use the same SuperSpan ID for each boundary
interface with the same customer. Use a different SuperSpan ID for each customer. For example, use SuperSpan
ID 1 for all the boundary interfaces with customer 1 and use SuperSpan ID 2 for all boundary interfaces with
customer 2.
Syntax: [no] stp-boundary <num>
The <num> parameter specifies the SuperSpan ID. You can specify a number from 1 – 65535.
To configure the boundary interfaces on SP 2 in Figure 8.26 on page 8-65, enter the following commands:
HP9300(config)# interface 2/1
HP9300(config-if-e1000-2/1)# stp-boundary 1
HP9300(config-if-e1000-2/2)# stp-boundary 2
Enabling SuperSpan
After you configure the SuperSpan boundary interfaces, enable SuperSpan. You can enable SuperSpan globally
or on an individual VLAN level. If you enable the feature globally, the feature is enabled on all VLANs.
NOTE: If you enable the feature globally, then create a new VLAN, the new VLAN inherits the global SuperSpan
state. For example, if SuperSpan is globally enabled when you create a VLAN, SuperSpan also is enabled in the
new VLAN.
You also can change the length of the Preforwarding state to a value from 3 – 30 seconds. The default is 5
seconds.
To globally enable SuperSpan, enter the following command:
HP9300(config)# super-span-global
8 - 70
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
HP9300(config-vlan-10)# no super-span
2/1 0 0 3 0
2/2 0 0 0 0
Total 0 0 3 0
C-BPDU Rxed The number of BPDUs received from the client spanning tree.
C-BPDU Txed The number of BPDUs sent to the client spanning tree.
T-BPDU Rxed The number of BPDUs received from the SuperSpan tunnel.
To display general STP information, see “Displaying STP Information” on page 8-8.
8 - 71
Installation and Basic Configuration Guide
STP per VLAN group allows you to group VLANs and apply the same STP parameter settings to all the VLANs in
the group. Figure 8.32 shows an example of a STP per VLAN group implementation.
Member
VLAN 3
STP group 1
Master VLAN 2
Member Member VLAN 3
VLAN 4 Member VLAN 4
STP priority 1
A master VLAN contains one or more member VLANs. Each of the member VLANs in a master VLAN runs the
same instance of STP and uses the STP parameters configured for the master VLAN. In this example, the HP
device is configured with VLANs 3, 4, 13, and 14. VLANs 3 and 4 are grouped in master VLAN 2, which is in STP
group 1. VLANs 13 and 14 are grouped in master VLAN 12, which is in STP group 2. The VLANs in STP group 1
all share the same spanning tree. The VLANs in STP group 2 share a different spanning tree.
All the ports in the VLANs are tagged. The ports must be tagged so that they can be in both a member VLAN and
the member's master VLAN. For example, ports 1/1 – 1/4 are in member VLAN 3 and also in master VLAN 2
(since master VLAN 2 contains member VLAN 3).
STP Load Balancing
Notice that the STP groups each have different STP priorities. In configurations that use the STP groups on
multiple devices, you can use the STP priorities to load balance the STP traffic. By setting the STP priorities for
the same STP group to different values on each device, you can cause each of the devices to be the root bridge
for a different STP group. This type of configuration distributes the traffic evenly across the devices and also
ensures that ports that are blocked in one STP group’s spanning tree are used by another STP group’s spanning
tree for forwarding. See “Configuration Example for STP Load Sharing” on page 8-74 for an example using STP
load sharing.
HP9300(config-vlan-2)# vlan 3
HP9300(config-vlan-3)# vlan 4
HP9300(config-vlan-4)# vlan 12
8 - 72
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
HP9300(config-vlan-12)# vlan 13
HP9300(config-vlan-13)# vlan 14
HP9300(config-vlan-14)# exit
HP9300(config-stp-group-1)# master-vlan 2
HP9300(config-stp-group-1)# member-vlan 3 to 4
HP9300(config-stp-group-1)# exit
HP9300(config)# stp-group 2
HP9300(config-stp-group-2)# master-vlan 12
HP9300(config-stp-group-2)# member-vlan 13 to 14
NOTE: If you delete the master VLAN from an STP group, the software automatically assigns the first member
VLAN in the group to be the new master VLAN for the group.
This command adds a member group (a VLAN group) to the STP group. All the VLANs in the member group
inherit the STP settings of the master VLAN in the group. The <num> parameter specifies the VLAN group ID.
NOTE: This command is optional and is not used in the example above. For an example of this command, see
“Configuration Example for STP Load Sharing”.
8 - 73
Installation and Basic Configuration Guide
Member VLANs
2 - 200
FWD 1
Member VLANs
3802 - 4000
BLK 1
In this example, each of the devices in the core is configured with a common set of master VLANs, each of which
contains one or more member VLANs. Each of the member VLANs in a master VLAN runs the same instance of
STP and uses the STP parameters configured for the master VLAN.
The STP group ID identifies the STP instance. All VLANs within an STP group run the same instance of STP. The
master VLAN specifies the bridge STP parameters for the STP group, including the bridge priority. In this
example, each of the devices in the core is configured to be the default root bridge for a different master VLAN.
This configuration ensures that each link can be used for forwarding some traffic. For example, all the ports on the
root bridge for master VLAN 1 are configured to forward BPDUs for master VLAN’s spanning tree. Ports on the
other devices block or forward VLAN 1’s traffic based on STP convergence. All the ports on the root bridge for
VLAN 2 forward VLAN 2’s traffic, and so on.
All the ports in the VLANs are tagged. The ports must be tagged so that they can be in both a member VLAN and
the member's master VLAN. For example, port 1/1 – and ports 5/1, 5/2, and 5/3 are in member VLAN 2 and
master VLAN 1 (since master VLAN a contains member VLAN 2).
Here are the commands for configuring the root bridge for master VLAN 1 in figure Figure 8.32 for STP per VLAN
group. The first group of commands configures the master VLANs. Notice that the STP priority is set to a different
value for each VLAN. In addition, the same VLAN has a different STP priority on each device. This provides load
balancing by making each of the devices a root bridge for a different spanning tree.
HP9300(config)# vlan 1
...
8 - 74
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
HP9300(config-vlan-3801)# exit
The next group of commands configures VLAN groups for the member VLANs. Notice that the VLAN groups do
not contain the VLAN numbers assigned to the master VLANs. Also notice that no STP parameters are
configured for the groups of member VLANs. Each group of member VLANs will inherit its STP settings from its
master VLAN.
Set the bridge priority for each master VLAN to the highest priority (1) on one of the devices in the STP per VLAN
group configuration. By setting the bridge priority to the highest priority, you make the device the default root
bridge for the spanning tree. To ensure STP load balancing, make each of the devices the default root bridge for
a different master VLAN.
HP9300(config)# vlan-group 1 vlan 2 to 200
...
HP9300(config-vlan-group-19)# vlan-group 20 vlan 3082 to 4000
HP9300(config-vlan-group-20)# exit
The following group of commands configures the STP groups. Each STP group in this configuration contains one
master VLAN, which contains a VLAN group. This example shows that an STP group also can contain additional
VLANs (VLANs not configured in a VLAN group).
HP9300(config)# stp-group 1
HP9300(config-stp-group-1)# master-vlan 1
HP9300(config-stp-group-1)# member-group 1
HP9300(config-stp-group-1)# stp-group 2
HP9300(config-stp-group-2)# master-vlan 201
HP9300(config-stp-group-2)# member-group 2
HP9300(config-stp-group-2)# stp-group 3
HP9300(config-stp-group-3)# master-vlan 401
HP9300(config-stp-group-3)# member-group 3
...
HP9300(config-stp-group-19)# stp-group 20
HP9300(config-stp-group-20)# member-group 20
PVST/PVST+ Compatibility
The following sections describe the Per VLAN Spanning Tree (PVST) and PVST+ compatibility features on HP
devices. Use the section that matches the software release you are using:
• For release 07.6.04 and later, see “PVST/PVST+ Compatibility – 07.6.04 and Later”.
• For releases 07.1.10 – 07.6.00, see “PVST/PVST+ Compatibility – Earlier Than 07.6.01b” on page 8-81.
1.Cisco user documentation for PVST/PVST+ refers to the IEEE 802.1Q spanning tree as the Common
Spanning Tree (CST).
8 - 75
Installation and Basic Configuration Guide
Previous releases allow an HP device to interoperate with IEEE 802.1Q devices only when the HP device is
configured for Single STP (SSTP). In this case, the HP device is operating as an IEEE 802.1Q device but cannot
run multiple spanning trees. The current release and previous releases allow the HP device to interoperate with
PVST when the HP device is configured for MSTP.
NOTE: HP ports automatically detect PVST+ BPDUs and enable support for the BPDUs once detected. You do
not need to perform any configuration steps to enable PVST+ support. However, to support the IEEE 802.1Q
BPDUs, you might need to enable dual-mode support.
HP’s support for Cisco's Per VLAN Spanning Tree plus (PVST+), allows an HP device to run multiple spanning
trees (MSTP) while also interoperating with IEEE 802.1Q devices. HP ports automatically detect PVST+ BPDUs
and enable support for the BPDUs once detected. The enhancement allows a port that is in PVST+ compatibility
mode due to auto-detection to revert to the default MSTP mode when one of the following events occurs:
• The link is disconnected or broken
• The link is administratively disabled
• The link is disabled by interaction with the link-keepalive protocol
This enhancement allows a port that was originally interoperating with PVST+ to revert to MSTP when connected
to an HP device.
8 - 76
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Do not
connect
PVST Region
NOTE: Support for the IEEE 802.1Q spanning tree always uses VLAN 1, regardless of whether the devices are
configured to use tagged or untagged frames on the VLAN.
1.Cisco PVST/PVST+ documentation refers to the Default VLAN as the Default Native VLAN.
8 - 77
Installation and Basic Configuration Guide
HP9300(config-if-1/1)# pvst-mode
NOTE: If you disable PVST+ support, the software still automatically enables PVST+ support if the port receives
a BPDU with PVST+ format.
Port Method
1/1 Set by configuration
1/2 Set by configuration
2/10 Set by auto-detect
3/12 Set by configuration
4/24 Set by auto-detect
Syntax: show span pvst-mode
NOTE: This command is present in earlier releases but the output format has been changed to reflect the feature
enhancements.
8 - 78
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
Method The method by which PVST+ support was enabled on the port. The
method can be one of the following:
• Set by configuration – You enabled the support.
• Set by auto-detect – The support was enabled automatically
when the port received a PVST+ BPDU.
Configuration Examples
The following examples show configuration examples for two common configurations:
• Untagged IEEE 802.1Q BPDUs on VLAN 1 and tagged PVST+ BPDUs on other VLANs
• Tagged IEEE 802.1Q BPDUs on VLAN 1 and untagged BPDUs on another VLAN
Tagged Port Using Default VLAN 1 as its Port Native VLAN
Figure 8.36 shows an example of a PVST+ configuration that uses VLAN 1 as the untagged default VLAN and
VLANs 2, 3, and 4 as tagged VLANs.
Cisco
device
Port 1/1 Port 3/2
HP9300(config-vlan-group-1)# exit
HP9300(config-if-1/1)# dual-mode
HP9300(config-if-1/1)# pvst-mode
These commands configure a VLAN group containing VLANs 2, 3, and 4, add port 1/1 as a tagged port to the
VLANs, and enable the dual-mode feature and PVST+ support on the port. The dual-mode feature allows the port
to send and receive untagged frames for the default VLAN (VLAN 1 in this case) in addition to tagged frames for
VLANs 2, 3, and 4. Enabling the PVST+ support ensures that the port is ready to send and receive PVST+
BPDUs. If you do not manually enable PVST+ support, the support is not enabled until the port receives a PVST+
BPDU.
The configuration leaves the default VLAN and the port’s Port Native VLAN unchanged. The default VLAN is 1
and the port’s Port Native VLAN also is 1. The dual-mode feature supports untagged frames on the default VLAN
only. Thus, port 1/1 can send and receive untagged BPDUs for VLAN 1 and can send and receive tagged BPDUs
for the other VLANs.
Port 1/1 will process BPDUs as follows:
• Process IEEE 802.1Q BPDUs for VLAN 1.
• Process tagged PVST BPDUs for VLANs 2, 3, and 4.
• Drop untagged PVST BPDUs for VLAN 1.
8 - 79
Installation and Basic Configuration Guide
Cisco
device
Port 1/1 Port 3/2
HP9300(config)# vlan 1
HP9300(config-vlan-1)# exit
HP9300(config)# vlan 2
HP9300(config-vlan-2)# exit
HP9300(config-if-1/1)# dual-mode 2
HP9300(config-if-1/1)# pvst-mode
HP9300(config-if-1/1)# exit
These commands change the default VLAN ID, configure port 1/1 as a tagged member of VLANs 1 and 2, and
enable the dual-mode feature and PVST+ support on port 1/1. Since VLAN 1 is tagged in this configuration, the
default VLAN ID must be changed from VLAN 1 to another VLAN ID. Changing the default VLAN ID from 1 allows
the port to process tagged frames for VLAN 1. VLAN 2 is specified with the dual-mode command, which makes
VLAN 2 the port’s Port Native VLAN. As a result, the port processes untagged frames and untagged PVST
BPDUs on VLAN 2.
NOTE: Although VLAN 2 becomes the port’s untagged VLAN, the CLI still requires that you add the port to the
VLAN as a tagged port, since the port is a member of more than one VLAN.
HP9300(config)# vlan 1
HP9300(config-vlan-1)# exit
HP9300(config-if-1/1)# pvst-mode
HP9300(config-if-1/1)# exit
HP9300(config-if-1/2)# pvst-mode
HP9300(config-if-1/2)# exit
8 - 80
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
In the configuration above, all PVST BPDUs associated with VLAN 1 would be discarded. Since IEEE BPDUs
associated with VLAN 1 are untagged, they are discarded because the ports in VLAN 1 are tagged. Effectively,
the BPDUs are never processed by the Spanning Tree Protocol. STP assumes that there is no better bridge on
the network and sets the ports to FORWARDING. This could cause a Layer 2 loop.
The following configuration is correct:
HP9300(config)# default-vlan-id 1000
HP9300(config)# vlan 1
HP9300(config-vlan-1)# exit
HP9300(config-if-1/1)# pvst-mode
HP9300(config-if-1/1)# dual-mode
HP9300(config-if-1/1)# exit
HP9300(config-if-1/2)# pvst-mode
HP9300(config-if-1/2)# dual-mode
HP9300(config-if-1/2)# exit
Setting the ports as dual-mode ensures that the untagged IEEE 802.1Q BPDUs reach the VLAN 1 instance.
NOTE: If you plan to use the PVST/PVST+ support, do not use VLAN 1. PVST+ uses VLAN 1 as a single STP
broadcast domain and thus uses a different BPDU format than for other VLANs.
PVST
Each spanning tree (that is, each instance of STP) has one device called the root bridge. The root bridge is the
control point for the spanning tree, and sends STP status and topology change information to the other devices in
the spanning tree by sending BPDUs to the other devices. The other devices forward the BPDUs as needed.
The format of an STP BPDU differs depending on whether it is a Cisco PVST BPDU or an HP BPDU. HP and
Cisco devices also can support single STP BPDUs, which use another format.
• An HP device configured with a separate spanning tree in each VLAN sends BPDUs in standard IEEE
802.1D format, but includes a proprietary four-byte tag. The tag identifies the VLAN the BPDU is for.
• A Cisco device configured for PVST sends the BPDUs to multicast MAC address 01-00-0C-CC-CC-CD. If
the device is configured for PVST+, then the device sends BPDUs for all VLANs except VLAN 1 to 01-00-0C-
CC-CC-CD. The device sends BPDUs in VLAN 1 to 01-80-C2-00-00-00, the single STP address (see below
and “PVST+”).
• An HP device configured for single STP (IEEE 802.1Q) sends untagged BPDUs to the well-known STP MAC
address 01-80-C2-00-00-00.
NOTE: Cisco devices can be configured to interoperate with devices that support IEEE 802.1Q single STP, but
the devices cannot be configured to run single STP.
8 - 81
Installation and Basic Configuration Guide
HP’s PVST support enables HP and Cisco devices that have separate spanning trees in each VLAN to
interoperate. The HP PVST support is automatically enabled when a port receives a PVST BPDU and does not
require configuration on the HP or Cisco device.
When PVST is enabled on an HP port, that port sends BPDUs in PVST format instead of HP’s spanning tree
format.
PVST+
HP devices and Cisco devices support separate spanning trees on an individual port-based VLAN basis.
However, until the IEEE standard for multiple spanning trees is finalized, vendors are using different methods to
support multiple spanning trees within their own products. PVST+ is an extension to PVST that enables a Cisco
device to interoperate with other devices that are running a single spanning tree (IEEE 802.1Q) while still running
a separate spanning tree in each VLAN.
PVST+ uses 802.1Q single STP BPDUs on VLAN 1 and PVST BPDUs (which have a proprietary format) for other
VLANs. In this case, the Cisco device uses devices running 802.1Q as tunnels for PVST (non-802.1Q) traffic.
The 802.1Q single STP BPDUs are addressed to the well-known STP MAC address 01-80-C2-00-00-00. The
PVST BPDUs for the other VLANs are addressed to multicast address 01-00-0C-CC-CC-CD.
The PVST+ method can require manual configuration of STP parameters on the 802.1Q devices to ensure that
traffic for the PVST VLANs is not blocked. In addition, the opportunities to adjust STP parameters to load balance
traffic on a VLAN basis are limited when using PVST+.
Using HP Single STP with Cisco PVST+
Since HP’s single STP feature complies with IEEE 802.1Q (the single STP specification), you also can use an HP
device running single STP to interoperate with a Cisco device running PVST+. When you enable single STP on
an HP device, the PVST compatibility feature is not enabled, even if a port receives a PVST BPDU.
NOTE: When PVST/PVST+ support is enabled on a port, support for HP BPDUs is disabled.
HP9300(config-if-1/1)# pvst-mode
NOTE: If you disable PVST/PVST+ support, the software still automatically enables PVST/PVST+ support if the
port receives an STP BPDU with PVST/PVST+ format.
8 - 82
Configuring Spanning Tree Protocol (STP) and Advanced STP Features
PVST cfg. Whether PVST support is statically enabled on the port. The value
can be one of the following:
• 0 – The support has not been statically enabled.
• 1 – The support has been statically enabled.
PVST on (by cfg. or detect) Whether PVST/PVST+ support is active on the port. The value can
be one of the following:
• 0 – PVST/PVST+ support is not enabled.
• 1 – PVST/PVST+ support is enabled, either because you
statically enabled the support or because the port received an
STP BPDU with PVST/PVST+ format.
8 - 83
Installation and Basic Configuration Guide
8 - 84